Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
File:                     lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json)
Hash identifier:          sMSRIsZMisML1qzuGJYIOeCwjqGvI0rRveJLU1X771o=
Subject key identifier:   3E:CE:50:23:98:90:94:41:A4:B8:4E:CE:AD:85:04:CF:B3:26:B5:02
Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
Certificate issuer:       /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
Manifest number:          0159
Signing time:             Mon 27 Jul 2026 06:59:12 +0000
Manifest this update:     Mon 27 Jul 2026 06:59:12 +0000
Manifest next update:     Mon 03 Aug 2026 06:59:12 +0000
Files and hashes:         1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: kcLqijjE1WPjLk4oPiP0fzLl0hQed67kvmx5k3acF/8=)
                          2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: /6Pq80Gx56ZFBPBtnhjbMbxhhA7hiQGMfNWAnIYq0MM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
        Validity
            Not Before: Jul 27 06:59:12 2026 GMT
            Not After : Aug  3 06:59:12 2026 GMT
        Subject: CN=6a6701c0-c54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:ce:37:d2:a2:28:c7:7f:0d:b6:71:1e:a5:
                    b2:82:dc:b0:24:cf:c3:70:44:21:9e:fb:27:b8:11:
                    66:c3:e1:e8:6d:4e:e2:e8:0f:23:0b:9f:00:35:c3:
                    66:d0:47:34:3b:2c:73:d5:88:dc:05:08:01:53:06:
                    98:3f:81:b6:db:14:70:be:ef:c9:99:aa:e8:15:b4:
                    dd:ca:02:ca:fd:8e:26:3f:c2:07:b9:a5:34:73:bb:
                    f9:54:7f:40:b3:f4:1f:41:97:d8:e3:86:36:df:64:
                    f2:58:ec:d8:d6:20:81:dc:67:7f:97:2f:cc:81:51:
                    94:94:27:2a:75:18:7c:49:97:ad:1c:c1:fe:a1:fc:
                    e6:d9:5f:fa:17:78:d3:7f:25:05:01:72:b4:a5:73:
                    d7:6b:70:79:af:bf:f6:69:fb:49:73:08:4f:85:0b:
                    d7:f6:a8:71:89:1d:8e:7e:20:04:e0:ed:48:c0:d1:
                    99:12:42:6f:90:89:fd:4f:b3:09:dd:ae:c0:3f:6c:
                    e7:76:60:7e:75:4b:52:b4:2c:00:8f:a4:9b:4a:8b:
                    e8:6c:88:68:b0:4e:5c:c0:af:46:28:99:49:9b:06:
                    07:d0:0f:59:01:a9:93:fb:ba:c1:e9:39:81:76:ff:
                    4e:75:f3:6b:7d:eb:3d:c4:91:3f:82:4a:fb:2a:36:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CE:50:23:98:90:94:41:A4:B8:4E:CE:AD:85:04:CF:B3:26:B5:02
            X509v3 Authority Key Identifier:
                keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:23:f4:ba:26:70:dc:1b:6f:22:cd:42:83:90:fd:87:0a:da:
         88:e6:ce:de:f9:16:39:7b:66:fe:81:2b:f1:7f:00:c5:41:80:
         2f:77:27:e2:d4:6a:8a:de:be:84:26:66:75:23:0d:c8:82:73:
         44:f7:79:9f:c5:2b:e7:18:b5:d2:d1:72:bb:45:97:07:ef:94:
         dd:5a:c8:27:9c:23:c8:d1:75:3d:d2:87:af:d3:ca:44:ea:f7:
         b3:84:31:74:48:40:c6:22:d3:b8:6f:fd:a0:26:c7:b2:e3:a1:
         f9:83:dd:66:86:84:47:fc:a3:9b:40:49:c7:5b:1e:2d:30:01:
         e5:93:69:bd:21:73:57:4d:7b:40:bb:71:9a:98:44:4c:54:33:
         67:ce:65:9b:18:bc:78:59:12:f6:98:12:46:ca:2e:a5:64:9f:
         aa:84:48:6d:c1:f8:eb:8b:c0:42:14:bd:96:bd:57:9b:da:1a:
         1b:56:26:8b:58:9a:72:2e:ec:90:ca:98:5d:50:fc:90:3f:39:
         0b:b7:10:c7:df:8c:15:d4:c9:02:a9:6a:ec:c9:3b:06:89:24:
         47:ce:3b:0f:b3:8c:76:97:c1:13:31:58:19:5d:99:50:b6:a7:
         58:9c:42:95:75:98:52:48:05:6c:da:91:aa:85:97:5e:bd:ad:
         e1:4d:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:11 2026 by rpki-client